CVE-2026-69256: Flowise: Remote Code Execution Vulnerability in CSVAgent
The CSVAgent node was observed to allow users to write Python code which gets executed via pyodide. The original intent was to allow users to utilise the pandas library for CSV processing. Although there is a denylist that checks for dangerous Python constructs from being passed in, pandas has a read_pickle() function that deserialises a pickled payload and this can be leveraged to achieve code execution.
References
- github.com/FlowiseAI/Flowise/commit/c79fe56a6c249850e96bce9b4859f7a0083e4507
- github.com/FlowiseAI/Flowise/pull/6257
- github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3
- github.com/FlowiseAI/Flowise/security/advisories/GHSA-x6vm-w76m-8j7g
- github.com/advisories/GHSA-x6vm-w76m-8j7g
- nvd.nist.gov/vuln/detail/CVE-2026-69256
Code Behaviors & Features
Detect and mitigate CVE-2026-69256 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →